$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft File: tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft (raw, json) Hash identifier: 2KHivdexkrm3oIuDy0ORFgXDubXpR7FXQUvNiLuzO14= Subject key identifier: 88:3C:6C:C2:14:41:43:53:9B:7E:0A:11:9D:FF:7C:69:E0:05:28:BC Authority key identifier: B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 Certificate issuer: /CN=A916A0AF/serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Certificate serial: 055A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft Manifest number: 0555 Signing time: Thu 24 Apr 2025 23:11:45 +0000 Manifest this update: Thu 24 Apr 2025 23:11:44 +0000 Manifest next update: Thu 01 May 2025 23:11:44 +0000 Files and hashes: 1: tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl (hash: 61erJW7ZZpIYG2K/4LwVWGReL50x4f6osMSpJCphfr0=) 2: 529F69FCE5CA11EBB98C5577C4F9AE02.roa (hash: iGGEAjUC0++42POw1gb2SZmwmNS0zkkpPN27YBry/aI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1370 (0x55a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=B66451F97188CAF8184D07C130A25D9576F8C105 Validity Not Before: Apr 24 23:11:44 2025 GMT Not After : May 1 23:11:44 2025 GMT Subject: CN=680ac531-af2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:8a:f9:a5:eb:31:57:75:79:1e:d3:7f:86: 51:f7:dc:de:45:b2:9c:01:b2:65:26:86:74:c2:ff: 82:8d:79:88:22:66:f5:96:8e:cd:14:bc:5e:72:cd: b0:b3:ba:f2:13:60:8d:89:04:08:22:6c:58:04:0a: 06:fd:b4:6a:ca:c5:21:8d:ca:60:dd:9b:90:56:28: bc:f3:bf:66:a6:3f:7b:83:d4:af:98:c2:90:b1:06: a1:6e:48:dc:e3:db:6f:ba:8d:65:6e:a5:36:9a:75: cb:cc:09:1d:97:7e:e4:8e:12:0d:eb:f1:07:8c:00: 66:36:73:dc:0e:f6:cc:61:b0:c3:68:0a:07:c6:02: 47:02:6c:a6:79:aa:a4:ae:86:f9:3d:84:0b:27:98: ad:5a:3b:02:be:5d:f9:f6:e7:53:59:6c:f6:c9:fc: d1:e8:77:c2:05:5d:56:45:6a:29:90:90:fc:ce:14: d5:33:3e:af:d9:81:43:af:9b:7e:f9:78:25:e1:e4: 47:9b:0c:0d:90:84:93:90:5d:70:2b:8c:04:57:d2: 52:26:b4:4e:af:3b:3e:3b:a4:cd:49:29:fb:0b:74: cb:af:67:db:a0:eb:36:b6:c7:9a:2a:d0:fb:13:03: 77:bc:29:68:1d:0b:65:9c:04:3a:72:c9:30:f5:f9: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:3C:6C:C2:14:41:43:53:9B:7E:0A:11:9D:FF:7C:69:E0:05:28:BC X509v3 Authority Key Identifier: keyid:B6:64:51:F9:71:88:CA:F8:18:4D:07:C1:30:A2:5D:95:76:F8:C1:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tmRR-XGIyvgYTQfBMKJdlXb4wQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/tmRR-XGIyvgYTQfBMKJdlXb4wQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a1:c6:79:6b:bc:17:ea:03:ce:60:31:83:04:7d:6a:23:1d: 6c:6b:fa:67:6a:6c:0b:41:76:71:47:df:50:bb:0a:8f:00:28: eb:72:a1:6a:91:fe:fe:06:37:56:45:02:48:cc:07:e1:73:1c: a3:e8:48:1f:7d:8f:37:37:bf:8a:5d:71:77:33:88:d7:ee:f2: 20:47:fd:b1:a4:7d:1d:48:8e:f0:28:37:f3:c0:0d:16:f3:56: 64:b2:a6:fc:f1:00:1d:a3:8b:84:be:58:fc:f8:f8:f6:de:47: c8:29:45:64:07:6f:30:2a:f9:d6:98:33:fc:26:8b:90:d8:2c: 79:b6:92:13:bc:8a:0b:1b:0b:42:a2:00:6a:dc:fa:cd:be:88: 1b:6c:75:1f:11:1a:74:59:80:79:fb:2c:2e:69:73:cf:2d:9c: 61:b0:ab:49:46:80:62:18:52:d5:f6:17:83:77:e8:a2:50:23: 07:e6:bf:e0:3c:89:b0:55:48:3d:d6:38:0a:8d:fa:1e:83:da: fe:03:02:e3:6f:b4:e3:4c:3a:23:a9:66:87:ec:2c:5a:61:7b: 61:b8:c3:52:f7:e3:7f:76:64:4b:b7:d2:64:88:a3:43:88:75: 22:68:a6:69:99:4e:54:29:c5:2d:f4:4f:98:0d:57:36:b2:98: 9c:24:14:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkEwQUYxMTAvBgNVBAUTKEI2NjQ1MUY5NzE4OENBRjgxODREMDdDMTMwQTI1RDk1 NzZGOEMxMDUwHhcNMjUwNDI0MjMxMTQ0WhcNMjUwNTAxMjMxMTQ0WjAYMRYwFAYD VQQDEw02ODBhYzUzMS1hZjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+WK+aXrMVd1eR7Tf4ZR99zeRbKcAbJlJoZ0wv+CjXmIImb1lo7NFLxecs2w s7ryE2CNiQQIImxYBAoG/bRqysUhjcpg3ZuQVii8879mpj97g9SvmMKQsQahbkjc 49tvuo1lbqU2mnXLzAkdl37kjhIN6/EHjABmNnPcDvbMYbDDaAoHxgJHAmymeaqk rob5PYQLJ5itWjsCvl359udTWWz2yfzR6HfCBV1WRWopkJD8zhTVMz6v2YFDr5t+ +Xgl4eRHmwwNkISTkF1wK4wEV9JSJrROrzs+O6TNSSn7C3TLr2fboOs2tseaKtD7 EwN3vCloHQtlnAQ6cskw9fkJlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIg8bMIU QUNTm34KEZ3/fGngBSi8MB8GA1UdIwQYMBaAFLZkUflxiMr4GE0HwTCiXZV2+MEF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTBBRi9GRDY1QjREOEU0 QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2Z1lUUWZCTUtKZGxYYjR3 UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RtUlItWEdJeXZnWVRRZkJNS0pkbFhiNHdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 QTBBRi9GRDY1QjREOEU0QTYxMUVCQjk0QUE1NENDNEY5QUUwMi90bVJSLVhHSXl2 Z1lUUWZCTUtKZGxYYjR3UVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKocZ5a7wX6gPOYDGDBH1qIx1sa/pnamwLQXZxR99QuwqPACjrcqFq kf7+BjdWRQJIzAfhcxyj6EgffY83N7+KXXF3M4jX7vIgR/2xpH0dSI7wKDfzwA0W 81Zksqb88QAdo4uEvlj8+Pj23kfIKUVkB28wKvnWmDP8JouQ2Cx5tpITvIoLGwtC ogBq3PrNvogbbHUfERp0WYB5+ywuaXPPLZxhsKtJRoBiGFLV9heDd+iiUCMH5r/g PImwVUg91jgKjfoeg9r+AwLjb7TjTDojqWaH7CxaYXthuMNS9+N/dmRLt9JkiKND iHUiaKZpmU5UKcUt9E+YDVc2spicJBSj -----END CERTIFICATE-----Generated at Sat Apr 26 03:51:32 2025 by rpki-client